Analysis

  • max time kernel
    64s
  • max time network
    97s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 02:03

General

  • Target

    ba8c51d41540639f76b41e753c659db83405ac36fc53f2af9a6065208b2136ba.exe

  • Size

    518KB

  • MD5

    ca74ebe87b94204f5a848d22c266f678

  • SHA1

    f1964b8c906e4e55bf4337373f21664ab797bd54

  • SHA256

    ba8c51d41540639f76b41e753c659db83405ac36fc53f2af9a6065208b2136ba

  • SHA512

    c39a8c35aa4a1fba67114816778df733c7fed9c63f7551283a470f9a5e175c4a421de6eaba5934b1cede27d19dc9b95f4c196c3175dc64dfdb8b37323b5450ae

  • SSDEEP

    12288:9uYGYTbT6bC0eceS1JwYYlLPt5oKnWq3Ub:4YpTboCgWlLPt5/WF

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ba8c51d41540639f76b41e753c659db83405ac36fc53f2af9a6065208b2136ba.exe
    "C:\Users\Admin\AppData\Local\Temp\ba8c51d41540639f76b41e753c659db83405ac36fc53f2af9a6065208b2136ba.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Users\Admin\AppData\Local\Temp\ba8c51d41540639f76b41e753c659db83405ac36fc53f2af9a6065208b2136ba.exe
      start
      2⤵
        PID:924
      • C:\Users\Admin\AppData\Local\Temp\ba8c51d41540639f76b41e753c659db83405ac36fc53f2af9a6065208b2136ba.exe
        watch
        2⤵
          PID:960

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/924-61-0x0000000000400000-0x000000000048B000-memory.dmp

              Filesize

              556KB

            • memory/924-62-0x0000000000400000-0x000000000048B000-memory.dmp

              Filesize

              556KB

            • memory/924-63-0x0000000000400000-0x000000000048B000-memory.dmp

              Filesize

              556KB

            • memory/960-60-0x0000000000400000-0x000000000048B000-memory.dmp

              Filesize

              556KB

            • memory/960-64-0x0000000000400000-0x000000000048B000-memory.dmp

              Filesize

              556KB

            • memory/1996-54-0x0000000076391000-0x0000000076393000-memory.dmp

              Filesize

              8KB

            • memory/1996-57-0x0000000000400000-0x000000000048B000-memory.dmp

              Filesize

              556KB